!supportsKDSA { return 0, 0, false } switch c { case p256: return 1, 32, true case p384: return 2, 48, true case p521: // Note that the block size doesn't match the field size for P-521. return 3, 80, true } return 0, 0, false // A mismatch } func hashToBytes[P Point[P]](c *Curve[P], hash []byte) []byte { e := bigmod.NewNat() hashToNat(c, e, hash) return e.Bytes(c.N) } // randomScalar is a copy of [randomPoint] that doesn't call ScalarBaseMult. func randomScalar[P Point[P]](c *Curve[P], generate func([]byte)...